WO2008008123A3 - Dispositif, procédé et système de stockage à pare-feu - Google Patents

Dispositif, procédé et système de stockage à pare-feu Download PDF

Info

Publication number
WO2008008123A3
WO2008008123A3 PCT/US2007/011872 US2007011872W WO2008008123A3 WO 2008008123 A3 WO2008008123 A3 WO 2008008123A3 US 2007011872 W US2007011872 W US 2007011872W WO 2008008123 A3 WO2008008123 A3 WO 2008008123A3
Authority
WO
WIPO (PCT)
Prior art keywords
software
storage
configuration
firewall
changes
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2007/011872
Other languages
English (en)
Other versions
WO2008008123A9 (fr
WO2008008123A2 (fr
Inventor
Richard Fetik
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Publication of WO2008008123A2 publication Critical patent/WO2008008123A2/fr
Publication of WO2008008123A9 publication Critical patent/WO2008008123A9/fr
Publication of WO2008008123A3 publication Critical patent/WO2008008123A3/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0209—Architectural arrangements, e.g. perimeter networks or demilitarized zones
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/552—Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • Computer And Data Communications (AREA)
  • Storage Device Security (AREA)

Abstract

La présente invention concerne une architecture, un procédé et un système de pare-feu de stockage fonctionnant en parallèle avec des technologies de sécurité existantes et permettant, notamment, une authentification d'application logicielle, une authentification et une autorisation des utilisateurs pour l'exécution d'une application, un examen, une vérification et une authentification de toutes les demandes d'accès de stockage, un contrôle de stockage protégé pour détecter et corriger des modifications anormales, un chiffrement de stockage protégé, tant au niveau données que logiciel, un déploiement de correctifs, de modifications de configuration et de logiciels via une liaison de synchronisation sécurisée à un serveur de gestion de correctifs et de configuration ainsi qu'une administration et une configuration système par serveur pour éviter qu'un maliciel ne pénètre dans les mécanismes de configuration locale.
PCT/US2007/011872 2006-05-17 2007-05-16 Dispositif, procédé et système de stockage à pare-feu Ceased WO2008008123A2 (fr)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US74753606P 2006-05-17 2006-05-17
US60/747,536 2006-05-17
US11/803,947 US7743260B2 (en) 2006-05-17 2007-05-15 Firewall+storage apparatus, method and system

Publications (3)

Publication Number Publication Date
WO2008008123A2 WO2008008123A2 (fr) 2008-01-17
WO2008008123A9 WO2008008123A9 (fr) 2008-04-17
WO2008008123A3 true WO2008008123A3 (fr) 2008-10-09

Family

ID=38863020

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2007/011872 Ceased WO2008008123A2 (fr) 2006-05-17 2007-05-16 Dispositif, procédé et système de stockage à pare-feu

Country Status (2)

Country Link
US (1) US7743260B2 (fr)
WO (1) WO2008008123A2 (fr)

Families Citing this family (64)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7877803B2 (en) * 2005-06-27 2011-01-25 Hewlett-Packard Development Company, L.P. Automated immune response for a computer
US10503418B2 (en) * 2005-12-01 2019-12-10 Drive Sentry Limited System and method to secure a computer system by selective control of write access to a data storage medium
US8051053B2 (en) * 2006-03-02 2011-11-01 Noam Camiel System and method for data storage firewall on data storage unit
US8327456B2 (en) * 2007-04-13 2012-12-04 Microsoft Corporation Multiple entity authorization model
US8423789B1 (en) * 2007-05-22 2013-04-16 Marvell International Ltd. Key generation techniques
US7502856B1 (en) * 2008-03-31 2009-03-10 International Business Machines Corporation Redirecting file access through a HTTP web server
US8370941B1 (en) 2008-05-06 2013-02-05 Mcafee, Inc. Rootkit scanning system, method, and computer program product
US8621601B2 (en) * 2008-05-21 2013-12-31 Sandisk Technologies Inc. Systems for authentication for access to software development kit for a peripheral device
US8510560B1 (en) 2008-08-20 2013-08-13 Marvell International Ltd. Efficient key establishment for wireless networks
US20100071064A1 (en) * 2008-09-17 2010-03-18 Weber Bret S Apparatus, systems, and methods for content selfscanning in a storage system
WO2010033497A1 (fr) 2008-09-18 2010-03-25 Marvell World Trade Ltd. Applications de préchargement en mémoire au moins partiellement pendant l’amorçage
US20110135093A1 (en) * 2008-11-26 2011-06-09 Radatti Peter V Secure telephone devices, systems and methods
US8693686B2 (en) * 2008-11-26 2014-04-08 Peter V. Radatti Secure telephone devices, systems and methods
KR20110000162A (ko) * 2009-06-26 2011-01-03 주식회사 넥슨 저장 미디어를 통한 온라인 게임 제공 시스템 및 그 방법
US8209739B2 (en) * 2009-08-03 2012-06-26 Kingston Technology Corporation Universal serial bus—hardware firewall (USB-HF) adaptor
WO2011070571A1 (fr) * 2009-12-08 2011-06-16 Safend Ltd. Système et procédé destinés à une sauvegarde sécurisée de données
US20120072988A1 (en) * 2010-03-26 2012-03-22 Telcordia Technologies, Inc. Detection of global metamorphic malware variants using control and data flow analysis
US8381281B2 (en) 2010-04-07 2013-02-19 International Business Machines Corporation Authenticating a remote host to a firewall
JP2011253511A (ja) * 2010-06-02 2011-12-15 Minoru Yoshida 情報生成システム及びその方法
US8645716B1 (en) 2010-10-08 2014-02-04 Marvell International Ltd. Method and apparatus for overwriting an encryption key of a media drive
US8869235B2 (en) 2011-10-11 2014-10-21 Citrix Systems, Inc. Secure mobile browser for protecting enterprise data
US9280377B2 (en) 2013-03-29 2016-03-08 Citrix Systems, Inc. Application with multiple operation modes
US9436629B2 (en) 2011-11-15 2016-09-06 Marvell World Trade Ltd. Dynamic boot image streaming
US8973138B2 (en) 2012-05-02 2015-03-03 The Johns Hopkins University Secure layered iterative gateway
CN103577240B (zh) * 2012-07-25 2018-12-11 腾讯科技（深圳）有限公司 系统自动清理方法、装置及存储介质
US8910239B2 (en) 2012-10-15 2014-12-09 Citrix Systems, Inc. Providing virtualized private network tunnels
US9971585B2 (en) 2012-10-16 2018-05-15 Citrix Systems, Inc. Wrapping unmanaged applications on a mobile device
US20140109072A1 (en) 2012-10-16 2014-04-17 Citrix Systems, Inc. Application wrapping for application management framework
US9575768B1 (en) 2013-01-08 2017-02-21 Marvell International Ltd. Loading boot code from multiple memories
US9985850B2 (en) 2013-03-29 2018-05-29 Citrix Systems, Inc. Providing mobile device management functionalities
US9355223B2 (en) 2013-03-29 2016-05-31 Citrix Systems, Inc. Providing a managed browser
US10284627B2 (en) 2013-03-29 2019-05-07 Citrix Systems, Inc. Data management for an application with multiple operation modes
US9736801B1 (en) 2013-05-20 2017-08-15 Marvell International Ltd. Methods and apparatus for synchronizing devices in a wireless data communication system
US9521635B1 (en) 2013-05-21 2016-12-13 Marvell International Ltd. Methods and apparatus for selecting a device to perform shared functionality in a deterministic and fair manner in a wireless data communication system
US9058504B1 (en) * 2013-05-21 2015-06-16 Malwarebytes Corporation Anti-malware digital-signature verification
EP3028145A1 (fr) 2013-07-31 2016-06-08 Marvell World Trade Ltd. Exécution en parallèle d'opérations d'amorçage
US9525728B2 (en) 2013-09-17 2016-12-20 Bank Of America Corporation Prediction and distribution of resource demand
CN103648115B (zh) * 2013-10-24 2016-08-24 北京东方波泰无线电频谱技术研究所 无线电台站管理系统
JP6009130B2 (ja) * 2014-06-11 2016-10-19 三菱電機株式会社 プログラム編集装置、プログラム管理装置、プログラム編集プログラムおよびプログラム管理プログラム
EP3104296B1 (fr) * 2015-06-10 2019-12-18 Alcatel Lucent Protection contre des attaques par usb
US10691659B2 (en) 2015-07-01 2020-06-23 Actifio, Inc. Integrating copy data tokens with source code repositories
US10613938B2 (en) * 2015-07-01 2020-04-07 Actifio, Inc. Data virtualization using copy data tokens
US9923911B2 (en) * 2015-10-08 2018-03-20 Cisco Technology, Inc. Anomaly detection supporting new application deployments
WO2017168228A1 (fr) 2016-03-08 2017-10-05 Marvell World Trade Ltd. Procédés et appareils d'authentification de dispositif sécurisée
US20190362075A1 (en) * 2018-05-22 2019-11-28 Fortinet, Inc. Preventing users from accessing infected files by using multiple file storage repositories and a secure data transfer agent logically interposed therebetween
EP3808036B1 (fr) * 2018-07-13 2025-11-12 Schneider Electric USA, Inc. Configuration de dispositif de stade tardif et validation basée sur un modèle de comportement
US11036856B2 (en) 2018-09-16 2021-06-15 Fortinet, Inc. Natively mounting storage for inspection and sandboxing in the cloud
AU2020218635B2 (en) 2019-02-07 2024-12-19 Egress Software Technologies Ip Ltd Method and system for processing data packages
AU2020263812B2 (en) * 2019-04-24 2025-08-28 Gambro Lundia Ab Medical device and method for remotely accessing a medical device
US11546300B2 (en) * 2019-05-07 2023-01-03 Comcast Cable Communications, Llc Firewall system with application identifier based rules
CN111078207B (zh) * 2019-12-09 2023-08-29 浪潮云信息技术股份公司 基于cypress框架跨操作系统实现自动化网页模拟操作的方法
US11228423B2 (en) 2020-01-12 2022-01-18 Advanced New Technologies Co., Ltd. Method and device for security assessment of encryption models
US11893064B2 (en) * 2020-02-05 2024-02-06 EMC IP Holding Company LLC Reliably maintaining strict consistency in cluster wide state of opened files in a distributed file system cluster exposing a global namespace
CN112364360B (zh) * 2020-11-11 2022-02-11 南京信息职业技术学院 一种财务数据安全管理系统
CN112948826B (zh) * 2021-04-26 2022-12-23 好人生（上海）健康科技有限公司 面向大数据的安全数据运算方法和系统
US12135789B2 (en) * 2021-08-04 2024-11-05 Secureworks Corp. Systems and methods of attack type and likelihood prediction
US12034751B2 (en) 2021-10-01 2024-07-09 Secureworks Corp. Systems and methods for detecting malicious hands-on-keyboard activity via machine learning
US12265611B2 (en) * 2021-12-01 2025-04-01 Dell Products L.P. System and method for monitoring and detecting of encryption based threats
CN113961939B (zh) * 2021-12-20 2022-03-08 北京智芯微电子科技有限公司 嵌入式操作系统安全的防护方法和系统
CN114666090A (zh) * 2022-02-11 2022-06-24 广州理工学院 一种防火墙
US12556566B2 (en) 2022-05-11 2026-02-17 Secureworks Corp. Systems and methods for dynamic vulnerability scoring
US12015623B2 (en) 2022-06-24 2024-06-18 Secureworks Corp. Systems and methods for consensus driven threat intelligence
US12609969B2 (en) 2022-11-03 2026-04-21 Secureworks Corp. Systems and methods for detecting security threats
CN120017429A (zh) * 2025-04-22 2025-05-16 紫光恒越技术有限公司 密码管理方法、防火墙主板、设备、程序产品及介质

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5896499A (en) * 1997-02-21 1999-04-20 International Business Machines Corporation Embedded security processor
US6973568B2 (en) * 2000-10-06 2005-12-06 Hewlett-Packard Development Company, L.P. Apparatus and method for implementing spoofing-and replay-attack-resistant virtual zones on storage area networks

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9197599B1 (en) * 1997-09-26 2015-11-24 Verizon Patent And Licensing Inc. Integrated business system for web based telecommunications management
JP4007873B2 (ja) * 2002-07-09 2007-11-14 富士通株式会社 データ保護プログラムおよびデータ保護方法
US7490235B2 (en) * 2004-10-08 2009-02-10 International Business Machines Corporation Offline analysis of packets
US7493656B2 (en) * 2005-06-02 2009-02-17 Seagate Technology Llc Drive security session manager

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5896499A (en) * 1997-02-21 1999-04-20 International Business Machines Corporation Embedded security processor
US6973568B2 (en) * 2000-10-06 2005-12-06 Hewlett-Packard Development Company, L.P. Apparatus and method for implementing spoofing-and replay-attack-resistant virtual zones on storage area networks

Also Published As

Publication number Publication date
US20070294756A1 (en) 2007-12-20
WO2008008123A9 (fr) 2008-04-17
US7743260B2 (en) 2010-06-22
WO2008008123A2 (fr) 2008-01-17

Similar Documents

Publication Publication Date Title
WO2008008123A3 (fr) Dispositif, procédé et système de stockage à pare-feu
EP2328319B1 (fr) Procédé, système et serveur pour réaliser un contrôle d accès sécurisé
EP2866166B1 (fr) Systèmes et procédés permettant d'imposer une anonymisation de données de surveillance de tiers
Ye et al. Security analysis of Internet-of-Things: A case study of august smart lock
US8572400B2 (en) Enhanced digital right management framework
EP2887576B1 (fr) Procédé et dispositif pour la mise à jour d'une clé de logiciel
EP2016701A4 (fr) Systeme à clé distribuée dynamique et procédé de gestion d'identité, d'authentification de serveurs, de sécurité de données et de prévention d'attaques de l'homme du milieu
Yu et al. A view about cloud data security from data life cycle
CN105162808B (zh) 一种基于国密算法的安全登录方法
WO2011149214A3 (fr) Procédé d'authentification trifactorielle d'un utilisateur permettant de générer un mot de passe à usage unique (mpu) au moyen d'informations d'iris et système d'authentification mutuelle sécurisé utilisant un module d'authentification mpu de terminal de communication sans fil
CN101588360A (zh) 内部网络安全管理的相关设备及方法
US20170372085A1 (en) Protecting data in a storage device
WO2008042871A3 (fr) Procédés et appareil permettant d'ouvrir une session sécurisée dans un site web par l'intermédiaire d'un site web de sécurité
WO2006078729A3 (fr) Appareil de reseau pour la verification de l'evaluation des vulnerabilites sur plusieurs reseaux
WO2010011731A3 (fr) Procédés et systèmes pour une entrée de clé sécurisée par l'intermédiaire de réseaux de communication
US11222116B2 (en) Heartbeat signal verification
WO2009065154A3 (fr) Procédé et appareil de protection de la saisie de données privées à l'intérieur de sessions web sécurisées
JP2012048488A (ja) コンピュータシステム
CN110445782B (zh) 一种多媒体安全播控系统及方法
CN109981568B (zh) 一种基于双通道身份认证的变电站远方操作安全防护方法
WO2010011921A8 (fr) Gestion http d'authentification et d'autorisation
Han et al. Scalable and secure virtualization of HSM with ScaleTrust
CN102333068B (zh) 一种基于ssh、sftp隧道智能管控系统及方法
CN102340500A (zh) 可信计算平台安全管理系统及安全管理方法
WO2008030991A3 (fr) Procédés de sécurité bloquant l'accès de tiers à des informations éducatives

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 07835767

Country of ref document: EP

Kind code of ref document: A2

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 07835767

Country of ref document: EP

Kind code of ref document: A2